EUVD-2021-2304

Malware in sbrugna...

Ubuntu 16.04 ESM : PHP vulnerabilities (USN-5300-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-1 advisory. It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. CVE-2015-9253,...

CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...

CVE-2021-3910: Improper Input Validation

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

PT-2021-7309

Name of the Vulnerable Software and Affected Versions OctoRPKI affected versions not specified Description The issue is related to the handling of invalid ROA Route Origin Authorisation objects by OctoRPKI. Specifically, when encountering a repository that returns an invalid ROA containing only a...